pkgtruth

active

Ground truth about npm and PyPI packages for AI coding agents. Detects hallucinated and slopsquatted dependencies before they get installed.

Code-only MCP server: no hosted endpoint, so you install and run it yourself. It is not probed, graded or counted in our reachability statistics.

Get it

Repository: github.com/hxckya/pkgtruth
Package: npm: pkgtruth
Run (stdio): npx -y pkgtruth
The usual command for this package registry; check the repository README for required settings.
License: MIT
Last update: 2026-09-10
Homepage: github.com/hxckya/pkgtruth#readme

Run this server as a hosted endpoint? Submit the endpoint and it moves to the remote directory, where it is probed and graded.